CVE-2020-3265
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD
Description
A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to gain root-level privileges.
Affected (3)
Products: Cisco: Sd Wan Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 18.4.5 |
| Running on/with | Platform Versions |
|---|---|
Cisco 1100 4g Integrated Services Router | All versions |
Cisco 1100 4gltegb Integrated Services Router | All versions |
Cisco 1100 4gltena Integrated Services Router | All versions |
Cisco 1100 6g Integrated Services Router | All versions |
Cisco Vedge 100 | All versions |
Cisco Vedge 1000 | All versions |
Cisco Vedge 100b | All versions |
Cisco Vedge 100m | All versions |
Cisco Vedge 100wm | All versions |
Cisco Vedge 2000 | All versions |
Cisco Vedge 5000 | All versions |
Cisco Vedge Cloud Router | All versions |
Cisco Vmanage Network Management System | All versions |
Cisco Vsmart Controller | All versions |
Related CWEs
References (2)
Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.